Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3332203d3e20323730363030.roa
File:                     323830343a366537633a3a2f33322d3332203d3e20323730363030.roa (raw, json)
Hash identifier:          rk7yaiLzOCgpkFI4xCwgaAaS1f3PcJ6M3ui+VruST8Q=
Subject key identifier:   FA:8B:D8:2F:58:D3:4C:83:70:49:ED:4C:7F:E8:16:FA:CE:E7:17:75
Certificate issuer:       /CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
Certificate serial:       74564ECBDA81CCECAF5669D36A733AEF0498DEC4
Authority key identifier: 10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3332203d3e20323730363030.roa
Signing time:             Fri 29 Nov 2024 12:35:29 +0000
ROA not before:           Fri 29 Nov 2024 12:30:29 +0000
ROA not after:            Fri 28 Nov 2025 12:35:29 +0000
asID:                     270600
IP address blocks:        2804:6e7c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl
                          rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 22:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:56:4e:cb:da:81:cc:ec:af:56:69:d3:6a:73:3a:ef:04:98:de:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1039A4787256342E0DAFE021E2BC0D6A74EF0354
        Validity
            Not Before: Nov 29 12:30:29 2024 GMT
            Not After : Nov 28 12:35:29 2025 GMT
        Subject: CN=FA8BD82F58D34C837049ED4C7FE816FACEE71775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:38:bd:91:7c:e3:e2:f4:3f:ab:31:0a:dc:
                    6b:21:75:6a:49:69:b1:65:41:b1:74:12:71:c2:e6:
                    a9:c5:e0:b7:4a:4c:37:b1:22:93:a6:a5:76:1f:13:
                    95:e2:80:cf:dc:c5:74:3a:49:28:e2:43:a4:12:c2:
                    0c:df:8e:7c:4b:13:90:8c:9f:5c:16:95:40:c0:de:
                    5c:cd:07:5f:a8:b9:32:bc:5a:23:9b:d6:dd:46:63:
                    ca:ca:2d:f2:6b:a5:72:fc:7b:c6:4a:43:6b:b7:00:
                    db:ab:f1:ed:58:cd:6a:5c:f7:1b:8a:7e:b7:0d:3a:
                    38:f8:ff:12:76:21:a8:a6:b2:62:b3:1f:ff:c5:00:
                    a1:8b:cc:b7:8a:02:3a:39:ef:c4:f8:55:c2:85:37:
                    32:65:aa:06:63:69:cb:81:04:5a:d6:0e:79:d8:68:
                    a3:fe:6f:0a:1c:a5:54:dc:2b:e4:9c:9b:21:55:f1:
                    4e:cc:10:cc:4e:2e:18:4b:58:9c:3c:fd:eb:84:24:
                    df:20:b5:02:f9:8f:c4:56:52:4f:9e:3f:76:a8:14:
                    66:07:e7:45:63:1c:d0:c8:5b:5c:63:18:13:30:1f:
                    65:a8:50:0d:e8:da:ee:9f:ff:91:c4:ee:76:c8:30:
                    92:27:ca:f8:db:a5:59:78:79:23:c9:87:d4:95:2b:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8B:D8:2F:58:D3:4C:83:70:49:ED:4C:7F:E8:16:FA:CE:E7:17:75
            X509v3 Authority Key Identifier:
                keyid:10:39:A4:78:72:56:34:2E:0D:AF:E0:21:E2:BC:0D:6A:74:EF:03:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/1039A4787256342E0DAFE021E2BC0D6A74EF0354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1039A4787256342E0DAFE021E2BC0D6A74EF0354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/0/323830343a366537633a3a2f33322d3332203d3e20323730363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:38:eb:f3:49:bf:60:71:d2:ae:e6:f1:df:5f:e1:b4:92:b1:
         24:8c:a5:29:3b:71:56:06:a4:9e:65:60:03:fd:d4:c6:47:9d:
         c7:a0:30:16:36:15:4e:cf:19:d4:cb:58:f9:24:0d:71:19:69:
         03:a5:20:67:42:07:7f:18:5d:c1:c6:8a:25:fe:2d:fe:ab:2d:
         b3:aa:9c:28:14:b4:5a:95:8e:4c:17:0b:9e:d2:fc:68:23:bd:
         7c:16:04:3f:93:92:38:02:61:6b:ba:91:f5:96:35:87:90:02:
         6c:47:23:53:da:ad:7c:9b:a3:d5:d0:68:f1:89:c1:ce:83:92:
         1d:c1:7f:09:b8:fd:bd:86:ec:bf:c0:5b:91:69:77:bd:68:05:
         cc:b5:7a:9f:e9:6b:30:16:39:fe:29:d9:02:f2:db:e1:9f:8b:
         c7:bd:11:14:52:c3:b9:84:69:cc:01:cc:8b:59:89:51:cd:24:
         fb:0d:87:e3:f3:71:cc:61:3b:94:a9:81:43:b4:8b:cd:b0:b9:
         0f:9b:1e:13:2a:fe:75:0d:46:45:47:54:59:2a:34:89:db:4d:
         17:8c:d2:b0:8b:b1:fc:71:39:ae:94:8a:8a:c3:ed:11:cb:25:
         57:8c:2f:f6:46:c9:b5:5e:85:7a:8b:38:07:4f:a0:6f:66:27:
         0c:a7:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:57:00 2025 by rpki-client